STIGQter: STIG Summary: HPE Alletra Storage ArcusOS Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

The HPE Alletra Storage ArcusOS device must be configured to prohibit using all unnecessary and/or nonsecure ports, protocols, and/or services.

DISA Rule

SV-283377r1194825_rule

Vulnerability Number

V-283377

Group Title

SRG-APP-000142-NDM-000245

Rule Version

ASMP-ND-000330

Severity

CAT I

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Disable all unnecessary and/or nonsecure ports, protocols, and/or services.

Disable unsecure ports:
cli% setnet disableports yes

Stop the RDA Service:
cli% stoprda

Stop the Remote Copy Service:
%cli stoprcopy"

Stop the VASA Service:
cli% stopvasa -f

Stop the CIM Service:
cli% stopcim -f

Stop the Web Services API:
cli% stopwsapi -f

Check Contents

Issue the following commands to check various services:

cli% setnet disableports yes

cli% stoprda
RDA service is already disabled.

Note: There is no command to show the status of the disabled ports or the RDA service.

cli% showrcopy -d

Remote Copy System Information
Status: Stopped, Normal

cli% showvasa

-Service- -------------------VASA_API2_URL------------------- -MemUsage(MiB)- -Version-
Enabled https://HPE_Alletra_Storage_MP-4UW0002474:9997/vasa 147 5.2.0.18

cli% showcim

-Service- -State- --SLP-- SLPPort -HTTPS- HTTPSPort PGVer CIMVer
Enabled Active Enabled 427 Enabled 5989 2.14.1 10.5.0

cli% showwsapi -d

service State Enabled

If any unnecessary and/or nonsecure ports, protocols, and/or services are enabled, this is a finding.

Vulnerability Number

V-283377

Documentable

False

Rule Version

ASMP-ND-000330

Severity Override Guidance

Issue the following commands to check various services:

cli% setnet disableports yes

cli% stoprda
RDA service is already disabled.

Note: There is no command to show the status of the disabled ports or the RDA service.

cli% showrcopy -d

Remote Copy System Information
Status: Stopped, Normal

cli% showvasa

-Service- -------------------VASA_API2_URL------------------- -MemUsage(MiB)- -Version-
Enabled https://HPE_Alletra_Storage_MP-4UW0002474:9997/vasa 147 5.2.0.18

cli% showcim

-Service- -State- --SLP-- SLPPort -HTTPS- HTTPSPort PGVer CIMVer
Enabled Active Enabled 427 Enabled 5989 2.14.1 10.5.0

cli% showwsapi -d

service State Enabled

If any unnecessary and/or nonsecure ports, protocols, and/or services are enabled, this is a finding.

Check Content Reference

M

Target Key

5742